Security & Compliance5 min read
CISA's Three-Day Clock Hits the Fleet
CISA BOD 26-04 requires three-day patching for critical vulnerabilities. At sea, that timeline is fiction without local vulnerability management.
Marcus Hale·June 19, 2026
← All posts
Tag
compliance
14 posts tagged with this topic.
Security & Compliance5 min read
What 10,000 Zero-Days Mean for Fleets
Anthropic expanded Project Glasswing to 150 organizations. Over 10,000 zero-days confirmed. The math on vessel cybersecurity just shifted.
Marcus Hale·June 3, 2026
Security & Compliance11 min read
Ransomware at Sea: An IR Playbook
Most incident response plans assume reliable connectivity and an IT team down the hall. Vessel operators have neither. A maritime IR playbook.
Marcus Hale·May 31, 2026
Security & Compliance4 min read
USCG Cyber Rule Meets Vessel AI
The USCG cybersecurity rule hits its July milestone in six weeks. The IT/OT segmentation mandate validates sovereign vessel AI architecture.
Ethan Marsh·May 25, 2026
Security & Compliance5 min read
npm Worms and the Case for Air Gaps
A worm compromised 633 npm packages in an hour. On-vessel software needs air-gapped dependency pipelines, not live registry pulls.
Ethan Marsh·May 20, 2026
Security & Compliance4 min read
When Cyber Risk Meets Voyage Planning
ABB and Cydome are merging cyber risk and voyage optimization into one platform. The real question is where that platform runs.
Marcus Hale·May 15, 2026
Security & Compliance5 min read
AI Found the OT Gateway First
Dragos found attackers using Claude to identify OT targets inside a water utility. Vessel operators should assume the same capability applies at sea.
Marcus Hale·May 11, 2026
Security & Compliance11 min read
Zero-Trust Networks for Private Vessels
Most vessel networks were designed for convenience, not security. A practical zero-trust architecture for superyacht IT and OT segmentation.
Marcus Hale·May 10, 2026
Security & Compliance5 min read
AI Gateways Are a Single Point of Failure
A critical LiteLLM SQL injection hands attackers every API key the proxy stores. Vessel operators relying on cloud AI gateways take note.
Marcus Hale·April 29, 2026
Security & Compliance5 min read
APT28 Targets Maritime Supply Chains
Russia's APT28 is deploying PRISMEX malware against NATO maritime logistics. Here is what vessel operators need to know about this active campaign.
Marcus Hale·April 27, 2026
Security & Compliance5 min read
Three CVEs in Your Vessel Data Gateway
Cydome found authentication and path-traversal flaws in the NAVTOR NavBox. The fix matters less than what the bugs reveal about maritime OT security.
Marcus Hale·April 24, 2026
Security & Compliance5 min read
When Ransomware Reaches the Engine Room
Maritime cyber incidents doubled in 2025, with ransomware now targeting engine and ballast systems. Local-first AI reduces the blast radius.
Ethan Marsh·April 20, 2026
Security & Compliance13 min read
CMMC Compliance for Superyachts
Most superyachts are not DoD contractors, but CMMC and NIST 800-171 still matter. The compliance map: what applies and what to build.
Marcus Hale·April 12, 2026
Security & Compliance6 min read
Mythos Zero-Days and Fleet Security
Anthropic's Mythos found thousands of zero-days in partner infrastructure. Here is what that means for vessel fleet cybersecurity.
Marcus Hale·April 10, 2026